Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
File:                     Rji_aLZnXipaOnki9kd9Kvs1f6w.mft (raw, json)
Hash identifier:          EV1Ph3Pj+jO3XxR7Z5s7l67gusirBIUUmYxyXMFro+4=
Subject key identifier:   1B:6A:AA:ED:C3:13:D4:5A:37:19:21:02:66:0A:16:94:A3:0B:2A:F0
Authority key identifier: 46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
Certificate issuer:       /CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Certificate serial:       019F9211C3A83A14687687A0A96A9F4C9951
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
Manifest number:          07D5
Signing time:             Fri 24 Jul 2026 03:01:05 +0000
Manifest this update:     Fri 24 Jul 2026 03:01:05 +0000
Manifest next update:     Sat 25 Jul 2026 03:01:05 +0000
Files and hashes:         1: Rji_aLZnXipaOnki9kd9Kvs1f6w.crl (hash: p5bRW3YPpxBKIqyvc0vX1qtnt6VPzylhh7t08LuQ1I4=)
                          2: TkBggeEIG38cTqgeQZJyjYdfERw.roa (hash: TVtGwEq6QFTLzR+0I1131Dy7n+e87d5rFxxyq5eLPbY=)
                          3: WEVqV3-Rp-d0LXAX2D5pD9lVyK4.roa (hash: /YFcmAE3f+SI8C115sE0xgY4yWWtCJhMHzRULYVE/Ig=)
                          4: nGgWCHlP5Rfk7nEXR5r0SwPGVhg.roa (hash: ub89EExosLdu9SpuUWFdEh7qASm/VbEptc/K/f13V3g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 03:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:c3:a8:3a:14:68:76:87:a0:a9:6a:9f:4c:99:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
        Validity
            Not Before: Jul 24 03:01:05 2026 GMT
            Not After : Jul 25 03:01:05 2026 GMT
        Subject: CN=1b6aaaedc313d45a37192102660a1694a30b2af0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:93:a1:9d:e3:e7:6d:00:95:54:ff:f7:75:82:
                    c0:41:13:b0:4f:17:98:e3:39:ec:3c:c6:77:bb:09:
                    cc:c1:8e:a8:96:80:ec:07:c9:81:9b:2e:99:6f:6b:
                    30:01:8b:da:27:8b:51:9a:05:55:7c:ea:fb:f7:d6:
                    95:aa:20:ef:b7:bf:9c:83:de:92:02:7d:10:7a:60:
                    74:4a:fc:82:b1:55:7f:1b:21:82:bd:bf:74:fc:a7:
                    08:6b:c9:d8:23:6d:45:a6:1b:fb:f7:71:94:0f:45:
                    a3:1a:54:4e:9e:6d:0f:6d:22:5e:07:84:60:b4:7b:
                    ec:8e:ea:62:60:a5:c9:0b:1d:bb:33:0e:fc:0d:73:
                    4e:8a:e8:19:e3:d7:55:28:3e:3b:52:e5:60:11:5d:
                    35:8b:92:10:f8:2e:22:11:c3:24:ac:ef:23:26:d7:
                    98:cb:13:03:e6:a3:fe:ca:23:f0:53:23:5a:d3:35:
                    02:cc:ef:58:f4:62:30:2a:ab:83:13:04:3a:33:ae:
                    a7:36:7e:ab:ca:40:1f:61:1d:af:8f:ba:a3:ea:30:
                    c6:40:1a:6b:b0:93:ef:ad:eb:ba:cc:60:9b:70:60:
                    14:d2:7f:9b:b2:e9:51:67:6e:51:8e:09:3b:e0:08:
                    57:12:f3:b6:96:b6:e0:e1:bd:fa:29:4f:78:51:0a:
                    90:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:6A:AA:ED:C3:13:D4:5A:37:19:21:02:66:0A:16:94:A3:0B:2A:F0
            X509v3 Authority Key Identifier:
                keyid:46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:4d:23:07:5b:6b:d3:68:a6:a0:19:d6:8c:33:5f:c5:0c:c8:
         2b:ae:2b:0c:00:d7:f8:f2:63:92:1e:21:97:99:a2:42:df:65:
         df:f2:13:1d:af:4f:6c:e6:5a:6b:09:d2:4b:85:36:de:39:57:
         9e:f0:2c:5d:12:18:c9:8e:b3:d3:c4:32:ae:89:c7:90:69:b8:
         00:e7:67:f4:c6:ab:4e:54:f7:33:e5:9e:f6:21:7c:86:56:31:
         13:23:14:25:0f:24:65:69:34:18:3c:af:9b:27:ef:74:88:f2:
         30:73:21:0b:71:cd:23:0f:84:ff:05:da:28:2c:17:4d:5e:bb:
         ab:a6:48:b5:e0:7a:86:5b:17:e8:68:58:90:87:3c:42:a2:5d:
         3d:c8:81:73:df:82:82:ae:d0:c7:78:03:3c:ab:c1:a0:2e:40:
         a3:db:1a:ed:fe:12:16:ef:1e:bd:0d:2c:82:cf:22:a9:75:c3:
         68:94:8a:80:4c:95:7c:3c:e2:a8:51:7b:b0:2e:59:f7:b7:74:
         09:73:94:36:d9:21:19:42:1d:f3:31:69:dd:2b:40:8f:5c:95:
         2c:c5:6f:1e:49:a9:3d:44:47:1a:f7:a4:29:2e:25:1f:10:41:
         5e:0a:ec:cc:93:7d:5c:11:97:0b:37:b9:f9:a2:52:90:37:5f:
         2a:d1:d6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:01:07 2026 by rpki-client